Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Avast! keeps popping up with a threat blocked related to svchost.e

xshogunx13

Posted 26 June 2015 - 01:06 PM

xshogunx13

New Member

Member

9 posts

Hi! My name is Mike, and my Avast! keeps presenting me with a pop-up stating it protected me from a threat, citing *insert random website that changes every time it pops up here* and svchost.exe as the culprits. Once this started happening, I ran AVG, AdwCleaner, Avast! and MBAM, deleted the things that AdwCleaner and MBAM said were bad, restarted, and it's still happening. I can only assume I picked up malware from using p2p software. I googled my issue and it led me here. Hopefully one of you fine people can help. I've run FRST and am attaching the logs, as well as a screen shot of the Avast! warning. EDIT: I apologize for the topic posting multiple times, I kept getting server time outs and retrying. FRST.txt46.72KB159 downloadsAddition.txt44.65KB191 downloads

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

Application errors:
==================
Error: (06/25/2015 03:56:30 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program LiveComm.exe version 17.5.9600.20856 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Error: (06/25/2015 04:19:44 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program LiveComm.exe version 17.5.9600.20856 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Error: (06/24/2015 00:35:59 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program LiveComm.exe version 17.5.9600.20856 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Error: (06/24/2015 00:28:16 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program LiveComm.exe version 17.5.9600.20856 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Error: (06/24/2015 00:11:15 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program LiveComm.exe version 17.5.9600.20856 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

If you do need to keep Java then download JavaRa Run the programme and select Remove Java Runtime. Uninstall all versions of Java presentOnce done then run it again and select Update Java runtime > Download and install Latest version

Now that you are clean, to help protect your computer in the future I recommend that you get the following free programmes:

Click on the link above to be taken to Unchecky.comclick the very large Download button.click SaveClick Open folderRight click on the Unchecky_setup and choose to Run as AdministratorOnce open click the Install button.Then click on FinishUnchecky is now installed and will help you keep unwanted check boxes unchecked, this is a fire and forget programme

It is critical to have both a firewall and anti virus to protect your system and to keep them updated.

To learn more about how to protect yourself while on the internet read this little guide Best security practices Keep safe